@botbuddy/cli 1.66.0 → 1.66.1

package/daemon-release/darwin-arm64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.66.0",
-  "source_commit": "6eb7fc060d0908254af17808ce9f110094386a2b",
-  "source_sha256": "fe2df8ccaaaf182e5e2ac8def3be1401adce09dd48a47ccc713ccb7afc04a7e8",
+  "release_version": "1.66.1",
+  "source_commit": "186cf2389659c39f7a7c4caa3f6fda5bdc54d670",
+  "source_sha256": "9809bace87147ec12fee985d3b4877bbefd1b39eabc5f0f047df553f0afcd3a9",
   "target": "darwin-arm64",
-  "sha256": "e7c4da070c2c016743963605c408d7ebb1f16c8c36d304fe52045b7dfc9d9dd1"
+  "sha256": "c3afe8d4c99efe77db044d4d7bb4aef532436e46cdc75179b0e0a847b3e8b190"
 }

package/daemon-release/linux-x64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.66.0",
-  "source_commit": "6eb7fc060d0908254af17808ce9f110094386a2b",
-  "source_sha256": "fe2df8ccaaaf182e5e2ac8def3be1401adce09dd48a47ccc713ccb7afc04a7e8",
+  "release_version": "1.66.1",
+  "source_commit": "186cf2389659c39f7a7c4caa3f6fda5bdc54d670",
+  "source_sha256": "9809bace87147ec12fee985d3b4877bbefd1b39eabc5f0f047df553f0afcd3a9",
   "target": "linux-x64",
-  "sha256": "5e43e75f6a6b2143b00de322fe954811fbfb4f0cda694f80fd44fa3c39bbae3e"
+  "sha256": "d8756014b7ba81cdb244425c82728e42892a5ce701fb435abd65ac8cb2743403"
 }

package/daemon-release/manifest.json

@@ -1,21 +1,21 @@
 {
   "schema_version": 1,
-  "release_version": "1.66.0",
-  "source_commit": "6eb7fc060d0908254af17808ce9f110094386a2b",
-  "source_sha256": "fe2df8ccaaaf182e5e2ac8def3be1401adce09dd48a47ccc713ccb7afc04a7e8",
+  "release_version": "1.66.1",
+  "source_commit": "186cf2389659c39f7a7c4caa3f6fda5bdc54d670",
+  "source_sha256": "9809bace87147ec12fee985d3b4877bbefd1b39eabc5f0f047df553f0afcd3a9",
   "targets": {
     "darwin-arm64": {
       "goos": "darwin",
       "goarch": "arm64",
       "binary": "daemon/bin/darwin-arm64/botbuddy-daemon",
-      "sha256": "e7c4da070c2c016743963605c408d7ebb1f16c8c36d304fe52045b7dfc9d9dd1",
+      "sha256": "c3afe8d4c99efe77db044d4d7bb4aef532436e46cdc75179b0e0a847b3e8b190",
       "mode": "0755"
     },
     "linux-x64": {
       "goos": "linux",
       "goarch": "amd64",
       "binary": "daemon/bin/linux-x64/botbuddy-daemon",
-      "sha256": "5e43e75f6a6b2143b00de322fe954811fbfb4f0cda694f80fd44fa3c39bbae3e",
+      "sha256": "d8756014b7ba81cdb244425c82728e42892a5ce701fb435abd65ac8cb2743403",
       "mode": "0755"
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botbuddy/cli",
-  "version": "1.66.0",
+  "version": "1.66.1",
   "description": "BotBuddy — Swarm coordination CLI for multi-agent workflows",
   "type": "module",
   "bin": {

package/src/agent-doctor.mjs

@@ -126,8 +126,19 @@ export function repairFailureRecovery(code, error = null) {
  */
 function applyStackLeaseCapability(report, capability) {
   if (!capability || typeof capability.status !== "string") return;
-  report.stack_lease.capability = capability.status;
+  // BOT-3144: the server names this owner's own revoked (disabled) host record; say
+  // "refused" rather than a generic "unattested", and make its fix the recovery.
+  const revoked = typeof capability.host_state === "string" && capability.host_state.length > 0 && capability.status !== "established";
+  report.stack_lease.capability = revoked ? "refused" : capability.status;
   if (capability.reason) report.stack_lease.reason = capability.reason;
+  if (revoked) {
+    report.stack_lease.host_state = capability.host_state;
+    if (typeof capability.host_key === "string") report.stack_lease.host_key = capability.host_key;
+    // Codex #1609 P2: the server names the fix (withdrawn consent needs the Helper first).
+    if (typeof capability.fix === "string" && capability.fix) report.stack_lease.fix = capability.fix;
+    if (!report.recovery) report.recovery = capability.reason ?? `this machine's host record is ${capability.host_state}; set it to maintenance or re-enable it on /docker, then run \`bb doctor --fix\``;
+  }
+  if (typeof capability.checked_at === "string") report.stack_lease.checked_at = capability.checked_at;
   if (capability.reported_host && capability.enrolled_host) {
     report.stack_lease.hostname_drift = {
       reported: capability.reported_host,
@@ -207,6 +218,9 @@ export async function doctorAgentAuth({
       remediation: "ticketed Codex requires --codex-thread-id <UUID>; ticketed Claude Desktop requires CLAUDE_CODE_HOST_SESSION_ID=local_<uuid>; use --no-ticket-reason for terminal or cloud work without a native link",
     },
   };
+  // BOT-3144: a plain `bb doctor` registers nothing, so report the verdict cached by the
+  // last registration (with when it was checked) instead of a bare `unverified`.
+  if (fresh && !fix) applyStackLeaseCapability(report, state.stack_lease_capability);
   let credential = fresh
     ? { token: state.agent_session_token, sessionId: state.session_id, agentId: state.agent_id, source: "cache" }
     : null;

package/src/agent-session.mjs

@@ -439,6 +439,11 @@ export async function selfHealAgentSession({
       ...(typeof data.session_token_generation === "string" && data.session_token_generation
         ? { session_token_generation: data.session_token_generation }
         : {}),
+      // BOT-3144: the registration's stack-lease verdict, so a plain `bb doctor` can
+      // report "refused" for a revoked host record instead of `unverified`.
+      ...(data.stack_lease_capability && typeof data.stack_lease_capability.status === "string"
+        ? { stack_lease_capability: { ...data.stack_lease_capability, checked_at: issued.toISOString() } }
+        : {}),
     };
     if (renewal && !isAgentStateFresh(state, issued, 0)) {
       throw missing("session_mint_invalid", "register_agent returned an invalid replacement session record.");

package/src/commands.mjs

@@ -423,7 +423,12 @@ export async function cmdDoctor(args, {
     log(`agent session: ${result.report.session.status}${result.report.session.minted_with ? ` (minted_with: ${result.report.session.minted_with})` : ""}`);
     if (result.report.stack_lease) {
       const sl = result.report.stack_lease;
-      log(`stack lease: ${sl.capability} (host ${sl.host}, machine id ${sl.machine_id_readable ? "readable" : "unavailable"})${sl.reason ? ` — ${sl.reason}` : ""}${publish ? ` ${formatPublishIp(publish)}` : ""}`);
+      // BOT-3144: a revoked host record leads with the cause and the fix.
+      if (sl.capability === "refused" && sl.host_state) {
+        log(`stack lease: refused — this machine's host record is ${sl.host_state}${sl.host_key ? ` (${sl.host_key})` : ""}: ${sl.fix ?? "set it to maintenance or re-enable it on /docker, then run \`bb doctor --fix\`"} (host ${sl.host}${sl.checked_at ? `, checked ${sl.checked_at}` : ""})`);
+      } else {
+        log(`stack lease: ${sl.capability} (host ${sl.host}, machine id ${sl.machine_id_readable ? "readable" : "unavailable"})${sl.reason ? ` — ${sl.reason}` : ""}${publish ? ` ${formatPublishIp(publish)}` : ""}`);
+      }
       if (publish && !isLoopbackIp(publish.publish_ip)) {
         log(`stack publish: leased stacks on this host are reachable beyond loopback (\`bb stack up --local-exec\` refuses; the Helper refuses ports_exposed_beyond_loopback) — fix: ${publishIpFix(publish.engine)}`);
       }